Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/323830343a373437383a3a2f33332d3333203d3e20323730393833.roa
File:                     323830343a373437383a3a2f33332d3333203d3e20323730393833.roa (raw, json)
Hash identifier:          6Kzowkf4UfRh+vL2Twzw34rgX4y+WMkbF3O78QK7e8U=
Subject key identifier:   4F:35:30:F5:D7:69:C5:19:BD:B0:44:3B:40:2E:B6:6E:DB:6A:7A:29
Certificate issuer:       /CN=73A759420E60B79FBFB48037B5A830EF409EA873
Certificate serial:       5F54649762481B7DE8D7AA831CDD896AEC348108
Authority key identifier: 73:A7:59:42:0E:60:B7:9F:BF:B4:80:37:B5:A8:30:EF:40:9E:A8:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73A759420E60B79FBFB48037B5A830EF409EA873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/323830343a373437383a3a2f33332d3333203d3e20323730393833.roa
Signing time:             Thu 25 Jan 2024 13:20:45 +0000
ROA not before:           Thu 25 Jan 2024 13:15:45 +0000
ROA not after:            Thu 23 Jan 2025 13:20:45 +0000
asID:                     270983
IP address blocks:        2804:7478::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:54:64:97:62:48:1b:7d:e8:d7:aa:83:1c:dd:89:6a:ec:34:81:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A759420E60B79FBFB48037B5A830EF409EA873
        Validity
            Not Before: Jan 25 13:15:45 2024 GMT
            Not After : Jan 23 13:20:45 2025 GMT
        Subject: CN=4F3530F5D769C519BDB0443B402EB66EDB6A7A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:7f:91:75:cb:68:00:17:bc:05:2c:55:da:
                    e1:14:0b:6b:07:e8:4e:4f:c2:46:a1:ff:ed:50:24:
                    0b:4a:54:1a:5c:5d:8a:10:63:f4:49:bf:6c:93:ed:
                    b1:f8:5d:97:d4:52:31:d2:38:bd:8b:88:a2:b4:6b:
                    43:e9:7c:2c:be:d9:73:f8:1f:9c:ee:e1:3e:b6:4a:
                    c2:0d:b7:5c:83:af:7d:14:2f:89:c5:9e:2f:1e:b4:
                    0f:66:6a:23:77:67:88:12:8a:31:bb:32:bf:da:e1:
                    f7:d3:ea:52:8b:3f:2e:48:de:85:67:74:a2:8a:94:
                    01:34:c8:10:67:fc:6c:0c:3a:46:46:a4:b5:fc:29:
                    0a:d0:0f:bc:4d:7d:da:d6:24:18:9e:23:cb:42:76:
                    0d:2b:c2:81:e0:09:fe:83:01:88:5a:4d:61:db:f6:
                    99:fa:04:eb:e1:c3:c9:26:9e:e5:94:6b:b5:f1:04:
                    02:d8:00:07:e1:c4:25:8c:2e:6c:64:85:73:a8:f5:
                    6d:33:cd:e0:b9:9e:67:9a:d5:f3:1f:59:d4:5a:29:
                    96:ef:43:4a:2a:f4:52:13:6c:b0:e9:18:ab:d6:da:
                    84:53:47:5d:32:6c:22:3a:be:6f:11:23:8a:10:29:
                    ea:08:4b:77:8c:3c:47:87:87:84:c4:9e:34:88:a8:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:35:30:F5:D7:69:C5:19:BD:B0:44:3B:40:2E:B6:6E:DB:6A:7A:29
            X509v3 Authority Key Identifier:
                keyid:73:A7:59:42:0E:60:B7:9F:BF:B4:80:37:B5:A8:30:EF:40:9E:A8:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/73A759420E60B79FBFB48037B5A830EF409EA873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73A759420E60B79FBFB48037B5A830EF409EA873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/323830343a373437383a3a2f33332d3333203d3e20323730393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7478::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:e3:5a:1b:8a:00:88:b5:0c:17:43:ad:2d:8a:25:9c:4b:
         61:f5:c0:07:55:77:6f:5c:18:87:16:bb:55:6e:2c:c1:c3:80:
         1d:14:de:dd:d8:48:d6:68:61:37:21:f3:5d:c7:02:be:6e:05:
         ba:86:fd:74:17:f9:2f:d5:fc:5c:c8:87:21:ab:77:7f:a8:88:
         44:8a:23:5c:3e:35:46:5e:12:4c:6f:55:f5:69:1b:b7:c8:9f:
         d9:8d:61:df:68:12:d5:00:25:c3:3a:31:7b:5c:35:6d:f9:b6:
         fa:95:a1:15:a2:0a:9d:d8:c2:98:e7:e6:0b:94:4f:dc:62:97:
         37:5c:b5:13:f2:3c:83:ed:b3:61:2b:0f:47:ba:27:d8:86:b9:
         85:03:88:93:93:29:0a:ef:5e:aa:cc:94:11:03:4f:96:00:44:
         6a:c1:28:a3:2c:03:4b:ea:54:d8:f9:af:3a:20:c3:65:17:0c:
         8f:f7:2a:8d:99:23:d5:a2:e4:40:d1:59:22:c1:dd:4d:d5:20:
         cd:df:d8:e5:54:ce:8e:65:21:8c:0d:24:75:1c:97:52:b0:8d:
         89:fe:dd:f0:5a:2a:17:38:9e:1a:6a:91:92:1e:00:be:1a:5f:
         d3:ad:e3:2e:c9:8d:84:e1:13:19:3f:8c:b2:be:72:3f:56:cb:
         fa:43:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:10 2025 by rpki-client